The Apache web server software must be a vendor-supported version.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-214359 | AS24-W1-000960 | SV-214359r961863_rule | CCI-000366 | high |
| Description | ||||
| Many vulnerabilities are associated with older versions of web server software. As hot fixes and patches are issued, these solutions are included in the next version of the server software. Maintaining the web server at a current version makes the efforts of a malicious user to exploit the web service more difficult. | ||||
| STIG | Date | |||
| Apache Server 2.4 Windows Server Security Technical Implementation Guide | 2025-02-12 | |||
Related Frameworks
4 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
CM-6
1.00
- DISA · 3 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.4.1
1.00
- DISA · 3 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.4.2
1.00
- DISA · 3 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000366
1.00
- DISA · 3 · disa_xccdf · related
Details
Check Text (C-214359r961863_chk)
Determine the version of the Apache software that is running on the system.
In a command line, navigate to "<'INSTALLED PATH'>\bin". Run "httpd -v" to view the Apache version.
If the version of Apache is not at the following version or higher, this is a finding:
Apache 2.4 (February 2012)
Fix Text (F-15569r277581_fix)
Install the current version of the web server software and maintain appropriate service packs and patches.